tetak
MIRT Team Lead Premium Member
 Joined: Jan 19, 2007 Posts: 5879
|
Posted: Sun Feb 17, 2008 1:18 am Post subject: [MIRT#8117] Trojan-Spy on pluginsmsn.com AS11798 |
|
|
Malware Alert Full Report: /Trojan_Spy_malware8117.html Changed status to confirmed malware.IP Converted: 74.220.215.220
dword = 1255987164
hex1 = 0x4adcd7dc
hex2 = 0x4a.0xdc.0xd7.0xdc
oct = 0112.0334.0327.0334
Messenger-live.exe at this location is malware known as TrojanSpy:Win32/Bancos.gen!C (Microsoft)View CIDR AS11798 Report: http://www.cidr-report.org/cgi-bin/as-report?as=11798
"11798 | US | arin | 2006-11-01 | BLUEHOST-AS - Bluehost Inc."<br />
Extended information for AS11798:
State/Province: ut
Country: us
Responsible Domain: bluehost.com
Abuse Email: abuse@bluehost.com
| Quote: | | http://www.pluginsmsn.com/download/Messenger-live.exe |
|
|